Replace ₹5–10 lakh hardware firewalls with managed pfSense.
Real-time blocking from Zeek + Snort across your fleet. WhatsApp alerts. Indian payments. Per-firewall pricing — pay only for what you protect.
Zeek + Snort fused
Behaviour detection plus signature detection. CINS, ET DROP, brute-force, scanners — all blocked the moment they're seen.
Cloudflare-aware
Never blocks Cloudflare proxy IPs. Real attacker IP from X-Forwarded-For pushed to Cloudflare WAF when needed.
WhatsApp-first ops
Critical alerts on WhatsApp with PDF evidence. Indian-market workflow your operators already use.
Multi-firewall
One dashboard for every pfSense in your datacenter or your customers'. Per-firewall API keys, rotate any time.
Crowd-sourced intel
Every block raised by any tenant feeds the global intel pipeline. Newcomers benefit on day one.
INR billing
Razorpay subscriptions. Starter ₹2,000/mo. Pro ₹5,000/mo. Datacenter ₹15,000+/mo.
Pricing
Per-firewall, billed monthly. Cancel anytime.
Why not just CrowdSec or DynFi?
| Feature | DC Firewall | CrowdSec | DynFi |
|---|---|---|---|
| Zeek + Snort fused detection | ✓ | Snort plugin only | — |
| WhatsApp alerts (Indian-market) | ✓ | — | — |
| Razorpay billing in INR | ✓ | USD/EUR only | EUR |
| Reseller / white-label sub-tenants | ✓ | — | Add-on |
| Cloudflare WAF push for HTTP attacks | ✓ | Plugin available | — |
| Geo-fencing per tenant | ✓ | ✓ | ✓ |
| Subnet auto-escalation (/24) | ✓ | — | — |
| Free public blocklist feed | ✓ | Paid | — |
| Per-tenant Cloudflare config | ✓ | Manual | — |
| pfSense-native integration | ✓ | Bouncer | ✓ |
| WHM/cPanel admin port detection | ✓ | — | — |
Frequently asked questions
▾Do I need pfSense to use this?
Right now yes — the agent installs on pfSense. Multi-server (cPanel, Plesk, Virtualmin, bare Linux via SSH) is rolling out next.
▾How fast does the agent block?
Detection-to-block latency is typically 1–3 seconds. Subnet escalation kicks in after the 5th IP from a /24 is blocked, then the entire /24 is dropped at the firewall in one rule.
▾What does the global threat intel cover?
Fused score from your fleet's events + ET DROP + AbuseIPDB + honeypot signals. IPs scoring ≥ 0.6 are pushed to all tenants every 10 minutes.
▾Will it block legitimate Cloudflare traffic?
No. We exclude all 16 Cloudflare CIDR ranges from blocking. For HTTP attacks coming through Cloudflare, our Cloudflare WAF push module pushes the real attacker IPs (from X-Forwarded-For) into your CF account's IP list.
▾Can I export my data if I leave?
Yes. CSV export of all blocks at /reports, full JSON via per-tenant API token. 30 days after cancellation your data is hard-deleted.
▾Is there a refund policy?
Pro-rated refund on cancellation within the first 14 days. After that, service continues to end of paid period.